Fixed security loophole